cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Welcome to Cisco Firewalls Community


932
Views
0
Helpful
1
Replies
Highlighted
Beginner

Configuration mismatch on Standby ASA

act# sh console-output

Message #1 : Message #2 :

Total SSMs found: 1

Message #4 :

Total NICs found: 7

Message #5 : mcwa Message #6 : i82557 Ethernet at irq 11Message #7 :   MAC: 442b.035d.3857

Message #8 : mcwa Message #9 : i82557 Ethernet at irq  5Message #10 :   MAC: 0000.0001.0001

Message #11 : i82547GI rev00 Gigabit Ethernet @ irq11 dev 1 index 05Message #12 :  MAC: 0000.0001.0002

Message #13 : i82546GB rev03 Gigabit Ethernet @ irq09 dev 2 index 03Message #14 :  MAC: 442b.035d.385b

Message #15 : i82546GB rev03 Gigabit Ethernet @ irq09 dev 2 index 02Message #16 :  MAC: 442b.035d.385a

Message #17 : i82546GB rev03 Gigabit Ethernet @ irq09 dev 3 index 01Message #18 :  MAC: 442b.035d.3859

Message #19 : i82546GB rev03 Gigabit Ethernet @ irq09 dev 3 index 00Message #20 :  MAC: 442b.035d.3858

Message #21 : Encryption hardware device : Cisco ASA-55x0 on-board accelerator (revision 0x0)

Message #22 :                              Boot microcode        : CN1000-MC-BOOT-2.00

Message #23 :                              SSL/IKE microcode     : CNLite-MC-SSLm-PLUS-2.03

Message #24 :                              IPSec microcode       : CNlite-MC-IPSECm-MAIN-2.06

Message #25 : Verify the activation-key, it might take a while...

Message #26 : Running Permanent Message #27 : Activation Key: Message #28 : 0x3300ed5b Message #29 : 0xf05b56ff Message #30 : 0x6812a904 Message #31 : 0xb0a004fc Message #32 : 0xce012e91 Message #33 :

Message #34 :

Licensed Message #35 : features for this platform:

Message #36 : Maximum Physical Interfaces       : Unlimited      perpetual

Message #37 : Maximum VLANs                     : 200            perpetual

Message #38 : Inside Hosts                      : Unlimited      perpetual

Message #39 : Failover                          : Active/Active  perpetual

Message #40 : VPN-DES                           : Enabled        perpetual

Message #41 : VPN-3DES-AES                      : Enabled        perpetual

Message #42 : Security Contexts                 : 2              perpetual

Message #43 : GTP/GPRS                          : Disabled       perpetual

Message #44 : AnyConnect Premium Peers          : 2              perpetual

Message #45 : AnyConnect Essentials             : Disabled       perpetual

Message #46 : Other VPN Peers                   : 5000           perpetual

Message #47 : Total VPN Peers                   : 5000           perpetual

Message #48 : Shared License                    : Disabled       perpetual

Message #49 : AnyConnect for Mobile             : Disabled       perpetual

Message #50 : AnyConnect for Cisco VPN Phone    : Disabled       perpetual

Message #51 : Advanced Endpoint Assessment      : Disabled       perpetual

Message #52 : UC Phone Proxy Sessions           : 2              perpetual

Message #53 : Total UC Proxy Sessions           : 2              perpetual

Message #54 : Botnet Traffic Filter             : Disabled       perpetual

Message #55 : Intercompany Media Engine         : Disabled       perpetual

Message #56 :

This platform has an ASA 5540 VPN Premium license.

Message #57 :

Message #58 :

Cisco Adaptive Security Appliance Software Version 8.4(3)

Message #59 :

Message #60 :   ****************************** Warning *******************************

Message #61 :   This product contains cryptographic features and is

Message #62 :   subject to United States and local country laws

Message #63 :   governing, import, export, transfer, and use.

Message #64 :   Delivery of Cisco cryptographic products does not

Message #65 :   imply third-party authority to import, export,

Message #66 :   distribute, or use encryption. Importers, exporters,

Message #67 :   distributors and users are responsible for compliance

Message #68 :   with U.S. and local country laws. By using this

Message #69 :   product you agree to comply with applicable laws and

Message #70 :   regulations. If you are unable to comply with U.S.

Message #71 :   and local laws, return the enclosed items immediately.

Message #72 :

Message #73 :   A summary of U.S. laws governing Cisco cryptographic

Message #74 :   products may be found at:

Message #75 :   http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

Message #76 :

Message #77 :   If you require further assistance please contact us by

Message #78 :   sending email to export@cisco.com.

Message #79 :   ******************************* Warning *******************************

Message #80 :

Message #81 : Copyright (c) 1996-2011 by Cisco Systems, Inc.

Message #82 :                 Restricted Rights Legend

Message #83 : Use, duplication, or disclosure by the Government is

Message #84 : subject to restrictions as set forth in subparagraph

Message #85 : (c) of the Commercial Computer Software - Restricted

Message #86 : Rights clause at FAR sec. 52.227-19 and subparagraph

Message #87 : (c) (1) (ii) of the Rights in Technical Data and Computer

Message #88 : Software clause at DFARS sec. 252.227-7013.

Message #89 :                 Cisco Systems, Inc.

Message #90 :                 170 West Tasman Drive

Message #91 :                 San Jose, California 95134-1706

Message #92 : .Message #93 :

act# sh failover history

==========================================================================

From State                 To State                   Reason

==========================================================================

09:44:53 EDT Jun 11 2012

Active Applying Config     Active Config Applied      Other unit wants me Active

09:44:53 EDT Jun 11 2012

Active Config Applied      Active                     Other unit wants me Active

01:24:13 EDT Jul 14 2012

Active                     Failed                     Interface check

01:31:03 EDT Jul 14 2012

Failed                     Standby Ready              Interface check

01:31:28 EDT Jul 14 2012

Standby Ready              Failed                     Interface check

01:31:36 EDT Jul 14 2012

Failed                     Standby Ready              Interface check

01:39:53 EDT Jul 14 2012

Standby Ready              Failed                     Interface check

02:05:46 EDT Jul 14 2012

Failed                     Standby Ready              Interface check

02:06:04 EDT Jul 14 2012

Standby Ready              Just Active                Other unit wants me Active

02:06:04 EDT Jul 14 2012

Just Active                Active Drain               Other unit wants me Active

02:06:04 EDT Jul 14 2012

Active Drain               Active Applying Config     Other unit wants me Active

02:06:04 EDT Jul 14 2012

Active Applying Config     Active Config Applied      Other unit wants me Active

02:06:04 EDT Jul 14 2012

Active Config Applied      Active                     Other unit wants me Active

21:07:08 EST Nov 26 2012

Active                     Failed                     Interface check

21:07:11 EST Nov 26 2012

Failed                     Standby Ready              Interface check

21:23:46 EST Nov 26 2012

Standby Ready              Just Active                Other unit wants me Active

21:23:46 EST Nov 26 2012

Just Active                Active Drain               Other unit wants me Active

21:23:46 EST Nov 26 2012

Active Drain               Active Applying Config     Other unit wants me Active

21:23:46 EST Nov 26 2012

Active Applying Config     Active Config Applied      Other unit wants me Active

21:23:46 EST Nov 26 2012

Active Config Applied      Active                     Other unit wants me Active

============================================================

stby# sh console-output                                   

Message #1 : Message #2 :

Total SSMs found: 1

Message #4 :

Total NICs found: 7

Message #5 : mcwa Message #6 : i82557 Ethernet at irq 11Message #7 :   MAC: 442b.035d.3860

Message #8 : mcwa Message #9 : i82557 Ethernet at irq  5Message #10 :   MAC: 0000.0001.0001

Message #11 : i82547GI rev00 Gigabit Ethernet @ irq11 dev 1 index 05Message #12 :  MAC: 0000.0001.0002

Message #13 : i82546GB rev03 Gigabit Ethernet @ irq09 dev 2 index 03Message #14 :  MAC: 442b.035d.385f

Message #15 : i82546GB rev03 Gigabit Ethernet @ irq09 dev 2 index 02Message #16 :  MAC: 442b.035d.385e

Message #17 : i82546GB rev03 Gigabit Ethernet @ irq09 dev 3 index 01Message #18 :  MAC: 442b.035d.385d

Message #19 : i82546GB rev03 Gigabit Ethernet @ irq09 dev 3 index 00Message #20 :  MAC: 442b.035d.385c

Message #21 : Encryption hardware device : Cisco ASA-55x0 on-board accelerator (revision 0x0)

Message #22 :                              Boot microcode        : CN1000-MC-BOOT-2.00

Message #23 :                              SSL/IKE microcode     : CNLite-MC-SSLm-PLUS-2.03

Message #24 :                              IPSec microcode       : CNlite-MC-IPSECm-MAIN-2.06

Message #25 : Verify the activation-key, it might take a while...

Message #26 : Running Permanent Message #27 : Activation Key: Message #28 : 0x0b0be076 Message #29 : 0xb044740d Message #30 : 0xec83a5d0 Message #31 : 0x99c45cf4 Message #32 : 0xc02b2d97 Message #33 :

Message #34 :

Licensed Message #35 : features for this platform:

Message #36 : Maximum Physical Interfaces       : Unlimited      perpetual

Message #37 : Maximum VLANs                     : 200            perpetual

Message #38 : Inside Hosts                      : Unlimited      perpetual

Message #39 : Failover                          : Active/Active  perpetual

Message #40 : VPN-DES                           : Enabled        perpetual

Message #41 : VPN-3DES-AES                      : Enabled        perpetual

Message #42 : Security Contexts                 : 2              perpetual

Message #43 : GTP/GPRS                          : Disabled       perpetual

Message #44 : AnyConnect Premium Peers          : 2              perpetual

Message #45 : AnyConnect Essentials             : Disabled       perpetual

Message #46 : Other VPN Peers                   : 5000           perpetual

Message #47 : Total VPN Peers                   : 5000           perpetual

Message #48 : Shared License                    : Disabled       perpetual

Message #49 : AnyConnect for Mobile             : Disabled       perpetual

Message #50 : AnyConnect for Cisco VPN Phone    : Disabled       perpetual

Message #51 : Advanced Endpoint Assessment      : Disabled       perpetual

Message #52 : UC Phone Proxy Sessions           : 2              perpetual

Message #53 : Total UC Proxy Sessions           : 2              perpetual

Message #54 : Botnet Traffic Filter             : Disabled       perpetual

Message #55 : Intercompany Media Engine         : Disabled       perpetual

Message #56 :

This platform has an ASA 5540 VPN Premium license.

Message #57 :

Message #58 :

Cisco Adaptive Security Appliance Software Version 8.4(3)

Message #59 :

Message #60 :   ****************************** Warning *******************************

Message #61 :   This product contains cryptographic features and is

Message #62 :   subject to United States and local country laws

Message #63 :   governing, import, export, transfer, and use.

Message #64 :   Delivery of Cisco cryptographic products does not

Message #65 :   imply third-party authority to import, export,

Message #66 :   distribute, or use encryption. Importers, exporters,

Message #67 :   distributors and users are responsible for compliance

Message #68 :   with U.S. and local country laws. By using this

Message #69 :   product you agree to comply with applicable laws and

Message #70 :   regulations. If you are unable to comply with U.S.

Message #71 :   and local laws, return the enclosed items immediately.

Message #72 :

Message #73 :   A summary of U.S. laws governing Cisco cryptographic

Message #74 :   products may be found at:

Message #75 :   http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

Message #76 :

Message #77 :   If you require further assistance please contact us by

Message #78 :   sending email to export@cisco.com.

Message #79 :   ******************************* Warning *******************************

Message #80 :

Message #81 : Copyright (c) 1996-2011 by Cisco Systems, Inc.

Message #82 :                 Restricted Rights Legend

Message #83 : Use, duplication, or disclosure by the Government is

Message #84 : subject to restrictions as set forth in subparagraph

Message #85 : (c) of the Commercial Computer Software - Restricted

Message #86 : Rights clause at FAR sec. 52.227-19 and subparagraph

Message #87 : (c) (1) (ii) of the Rights in Technical Data and Computer

Message #88 : Software clause at DFARS sec. 252.227-7013.

Message #89 :                 Cisco Systems, Inc.

Message #90 :                 170 West Tasman Drive

Message #91 :                 San Jose, California 95134-1706

Message #92 : .Message #93 :

Message #94 : .Message #95 : .Message #96 :

stby# sh failover history

==========================================================================

From State                 To State                   Reason

==========================================================================

20:13:47 EST Dec 17 2012

Standby Ready              Cold Standby               Configuration mismatch

20:13:48 EST Dec 17 2012

Cold Standby               Sync Config                Configuration mismatch

20:14:35 EST Dec 17 2012

Sync Config                Sync File System           Configuration mismatch

20:14:35 EST Dec 17 2012

Sync File System           Bulk Sync                  Configuration mismatch

20:14:46 EST Dec 17 2012

Bulk Sync                  Standby Ready              Configuration mismatch

08:55:31 EST Dec 25 2012

Standby Ready              Cold Standby               Configuration mismatch

08:55:32 EST Dec 25 2012

Cold Standby               Sync Config                Configuration mismatch

08:55:45 EST Dec 25 2012

Sync Config                Sync File System           Configuration mismatch

08:55:45 EST Dec 25 2012

Sync File System           Bulk Sync                  Configuration mismatch

08:56:01 EST Dec 25 2012

Bulk Sync                  Standby Ready              Configuration mismatch

09:23:31 EST Dec 25 2012

Standby Ready              Cold Standby               Configuration mismatch

09:23:32 EST Dec 25 2012

Cold Standby               Sync Config                Configuration mismatch

09:23:46 EST Dec 25 2012

Sync Config                Sync File System           Configuration mismatch

09:23:46 EST Dec 25 2012

Sync File System           Bulk Sync                  Configuration mismatch

09:24:01 EST Dec 25 2012

Bulk Sync                  Standby Ready              Configuration mismatch

10:47:22 EST Dec 25 2012

Standby Ready              Cold Standby               Configuration mismatch

10:47:23 EST Dec 25 2012

Cold Standby               Sync Config                Configuration mismatch

10:47:37 EST Dec 25 2012

Sync Config                Sync File System           Configuration mismatch

10:47:37 EST Dec 25 2012

Sync File System           Bulk Sync                  Configuration mismatch

10:47:51 EST Dec 25 2012

Bulk Sync                  Standby Ready              Configuration mismatch

==========================================================================

NOTE: I have also performed the wri standby on the active unit to see if the configuration syc's however that is not working either. I have also done the wri mem on the active unit yet I am still getting the same error message.

I hope someone can help on this....thanks...

Everyone's tags (4)
1 REPLY 1

Configuration mismatch on Standby ASA

Hello,

Please share the show run of both units,

Regards,

Julio

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC